Amendments to the Claims: 



This listing of claims will replace all prior versions and listings of claims in the application. 
Listing of Claims: 

1 . (Currently Amended) A system for monitoring and logging events generated 
during the execution of an on-line service application, said system comprising: 

an event generator software module residing on a production server computer 
adapted to execute an on-line service application thereon, said event generator software module 
being operable to cause the generation of events and associated event data representative of the 
performance of said on-line service application during execution thereof by said production 
server computer; 

an event router software module residing on said production server computer and 
being operable to receive said events and associated event data and to produce a stream of events 
and associated event data for real-time event monitoring; 

a controller software module residing on said production server computer and 
being adapted to control operation of said event router software module and to reconfigure 
operation of said event router software module during execution of said on-line service 
application; [[and,]] 

a real-time event monitor software module residing on said production server 
computer and being configurable with threshold criteria related to said events and associated 
event data, said real-time event monitor software module being operable to receive said stream 
of events and associated event data and to generate alerts and associated alert data in response to 
said threshold criteria being exceeded by said events of said stream of events ; and 

a near real-time event monitor software module residing on said production server 
and being configurable with threshold criteria related to said events and associated event data, 
said near real-time event monitor software module being operable to periodically read the 
threshold criteria and the associated event data to determine changes and, if it is determined that 
changes have been made, the near real-time event monitor is further operable to reconfigure 
itself using the changed threshold criteria and the changed associated event data . 
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2. (Original) The system of Claim 1, wherein said event generator software module 
includes respective software routines corresponding to said events and associated event data, and 
wherein said event generator software module is further operable to cause the generation of said 
events and associated event data in response to references to said software routines embedded in 
said on-line service application being encountered and acted upon during execution of said on- 
line service application. 

3. (Original) The system of Claim 1, wherein at least one of said events has a level 
associated therewith during coding of said on-line service application, wherein said event router 
software module has a configurable parameter identifying a level for use in selecting which of 
said events is to be written to an event log data file, and wherein said event router software 
module is further operable to select said at least one of said events during execution of said on- 
line service application for writing to an event log data file based at least in part upon a 
comparison of said level associated with said at least one of said events and said level identified 
by said configurable parameter. 

4. (Original) The system of Claim 3, wherein said level identified by said configurable 
parameter is reconfigurable during execution of said on-line service application. 

5. (Original) The system of Claim 3, wherein said level associated with said at least one 
of said events is related to the volume of event data associated with said at least one of said 
events written to an event log data file upon the selection of said at least one of said events for 
writing to an event log data file. 

6. (Original) The system of Claim 1, wherein at least one of said events has a category 
associated therewith during coding of said on-line service application, wherein said event router 
software module has a configurable parameter identifying a category for use in selecting which 
of said events is to be written to an event log data file, and wherein said event router software 
module is further operable to select said at least one of said events during execution of said on- 
line service application for writing to an event log data file based at least in part upon a 
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comparison of said category associated with said at least one of said events and said category 
identified by said configurable parameter. 

7. (Original) The system of Claim 6, wherein said category identified by said 
configurable parameter is reconfigurable during execution of said on-line service application. 

8. (Original) The system of Claim 6, wherein said category associated with said at least 
one of said events identifies a source code file of said on-line service application. 

9. (Original) The system of Claim 1, wherein said event router software module is 
further operable to create buffers for receiving said events and associated event data, and 
wherein the minimum number of said buffers is reconfigurable during execution of said on-line 
service application. 

10. (Original) The system of Claim 1, wherein said event router software module is 
further operable to create buffers for receiving said events and associated event data, and 
wherein the maximum number of said buffers is reconfigurable during execution of said on-line 
service application. 

11. (Original) The system of Claim 1, wherein said event router software module is 
further operable to create buffers for receiving said events and associated event data, and 
wherein the size of said buffers is reconfigurable during execution of said on-line service 
application. 

12. (Original) The system of Claim 1, wherein said event router software module is 
further operable to create buffers for receiving said events and associated event data, and 
wherein the time interval between flushes of said buffers is reconfigurable during execution of 
said on-line service application. 

13. (Original) The system of Claim 1, wherein said event router software module is 
further operable to write said events and associated event data to an event log data file having a 
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storage location, and wherein said storage location of said event log data file is reconfigurable 
during execution of said on-line service application. 

14. (Original) The system of Claim 1, wherein said event router software module is 
further operable to write said events and associated event data to an event log data file having a 
file name, and wherein said file name of said event log data file is reconfigurable during 
execution of said on-line service application. 

15. (Original) The system of Claim 14, wherein said production server computer has an 
associated identifier uniquely identifying said production server computer, and wherein said file 
name of said event log data file is based at least in part on said identifier of said production 
server computer. 

16. (Original) The system of Claim 14, wherein said event log data file has a creation 
time associated therewith, and wherein said file name of said event log data file is based at least 
in part on said creation time. 

17. (Original) The system of Claim 1, wherein said event log data file is a first event log 
data file and said event router software module is further operable to write said events and 
associated event data to said first event log data file during a time interval and to a second event 
log data file after expiration of said time interval, and wherein said time interval is 
reconfigurable during execution of said on-line service application. 

18. (Original) The system of Claim 1, wherein said controller software module is further 
operable to enable and disable operation of said event router software module. 

19. (Original) The system of Claim 1, wherein said stream of events and associated event 
data comprises a first stream of events and said event router software module is further operable 
to produce a second stream of events and associated event data for non-real-time event 
monitoring, and wherein said event router software module is further operable to select events 
and associated event data generated by said event generator software module for inclusion in at 
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least one of said first stream of events and associated event data and said second stream of events 
and associated event data. 

20. (Original) The system of Claim 1, wherein said stream of events and associated event 
data comprises a first stream of events and said event router software module is further operable 
to produce a second stream of events and associated event data, and wherein said system further 
comprises a non-real-time event monitor software module operable to monitor events and 
associated event data not monitored by said real-time event monitor software module. 

21. (Original) The system of Claim 1, wherein said stream of events and associated event 
data comprises a first stream of events and said event router software module is further operable 
to produce a second stream of events and associated event data for writing to an event log data 
file, and wherein said system further comprises an event log data file collector software module 
residing on a processing server computer communicatively connected to said production server 
computer, said event log data file collector software module being operable to retrieve said event 
log data file from said production server computer. 

22. (Original) The system of Claim 21, wherein said event log data file is a first event 
log data file, wherein said event router software module is further operable to write said events 
and associated event data to a second event log data file, wherein said event log data file 
collector software module is operable to retrieve said first event log data file at a first time and 
said second event log data file at a second time, and wherein the time interval between said first 
time and said second time is reconfigurable during execution of said on-line service application. 

23. (Original) The system of Claim 21, wherein said event log data file is a first event 
log data file and said production server computer is a first production server computer, and 
wherein said event log data file collector software module is operable to retrieve a second event 
log data file from a second production server computer. 

24. (Original) The system of Claim 23, wherein said second production server computer 
has a unique identifier associated therewith, and wherein said event log data file collector 
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software module is reconfigurable during execution of said on-line service application with said 
unique identifier associated with said second production server computer to cause retrieval of 
said second event log data file from said second production server computer. 

25. (Original) The system of Claim 23, wherein said on-line service application is a first 
on-line service application, and wherein said second event log data file is associated with a 
second on-line service application. 

26. (Original) The system of Claim 1, wherein said stream of events and associated event 
data comprises a first stream of events and said event router software module is further operable 
to produce a second stream of events and associated event data for writing to an event log data 
file, and wherein said system further comprises an event log data file processor computer 
software module residing on a processing server computer communicatively connected to said 
production server computer, said event log data file processor software module being operable to 
convert said events and associated event data of said event log data file into a textual format. 

27. (Original) The system of Claim 1, wherein said stream of events and associated event 
data comprises a first stream of events and said event router software module is further operable 
to produce a second stream of events and associated event data for writing to an event log data 
file, and wherein said system further comprises an event log data file processor computer 
software module residing on a processing server computer communicatively connected to said 
production server computer, said event log data file processor software module being operable to 
communicate said events and associated event data of said event log data file for storage in a 
database of an archive server computer communicatively connected to said processing server 
computer. 

28. (Currently Amended) A system for monitoring and logging events generated 
during the execution of an on-line service application, said system comprising: 

an event generator software module residing on a production server computer 
adapted to execute an on-line service application thereon, said event generator software module 
comprising software routines operable to cause the generation of events and associated event 
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data representative of the performance of said instrumented on-line service application when 
embedded references to said software routines are encountered during execution of said on-line 
service application by said production server computer; 

an event router software module residing on said production server computer and 
being operable to receive said events and associated event data and to produce a stream of events 
and associated event data for real-time event monitoring , wherein at least one of said events 
enables tracking of the duration of a multi-stage process of said on-line service application when 
more than one instance of the process is contemporaneously executing on the production server 
computer and allows a multiple of said events to be identified as children of a single transaction ; 
and[[J] 

a real-time event monitor software module residing on said production server 
computer and being configurable with threshold criteria related to said events and associated 
event data, said real-time event monitor software module being operable to receive said stream 
of events and associated event data and to generate alerts and associated alert data in response to 
said threshold criteria being exceeded by said events of said stream of events, said threshold 
criteria being reconfigurable during execution of said on-line service application. 

29. (Original) The system of Claim 28, wherein at least one of said events corresponds to 
a critical condition occurring during execution of said on-line service application and requiring 
notification of a person at least partially responsible for the operation of said on-line service 
application. 

30. (Original) The system of Claim 28, wherein at least one of said events enables 
logging of diagnostic data representing the state of said on-line service application during 
execution at a desired location in source code thereof. 

31. (Canceled) 

32. (Original) The system of Claim 28, wherein at least one of said events enables a 
determination as to when handled exceptions occur during execution of said on-line service 
application. 
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33. (Original) The system of Claim 28, wherein at least one of said events enables 
designation of a specified variable for logging of performance data associated with the execution 
of said on-line service application. 

34. (Original) The system of Claim 33, wherein said at least one of said events enables 
incrementing of said specified variable. 

35. (Currently Amended) A method of monitoring and logging the occurrence of pre- 
identified events generated during execution of an on-line service application, the method 
comprising the steps of: 

receiving a threshold criterion having associated threshold criterion data for use in 
determining whether an alert having associated alert data is to be generated upon the occurrence 
of a pre-identified condition during execution of an on-line service application, the threshold 
criterion being configurable during execution of the on-line service application; 

generating an event having associated event data upon the occurrence of the pre- 
identified condition during execution of the on-line service application; 

after generating the event, evaluating the threshold criterion substantially in real- 
time using the threshold criterion data and the generated event data to determine whether the 
threshold criterion is met; and[[,]] 

if the threshold criterion is met, producing an alert having associated alert data 
corresponding to the occurrence of the pre-identified condition and to the threshold criterion 
having been met , the associated alert data comprising a string including at least one current value 
of the threshold criterion data utilized in evaluating the threshold criterion . 

36. (Original) The method of Claim 35, wherein the method further comprises a step of 
communicating an alert and associated alert data to a device for presentation in substantially real- 
time to a person at least partially responsible for operation of the on-line service application. 

37. (Original) The method of Claim 35, wherein the generated event has an associated 
event identifier, wherein the threshold criterion data includes an event identifier, and wherein the 
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step of evaluating includes comparing the event identifier associated with the generated event 
against the event identifier of the threshold criterion. 

38. (Original) The method of Claim 35, wherein the generated event has an associated 
event level, wherein the threshold criterion data includes an event level, and wherein the step of 
evaluating includes comparing the event level associated with the generated event against the 
event level of the threshold criterion. 

39. (Original) The method of Claim 35, wherein the generated event is one generated 
event of a plurality of generated events, wherein a portion of the generated events of the plurality 
of generated events correspond to transactions, wherein the threshold criterion data includes a 
number of occurrences of a particular transaction, an event identifier corresponding to the 
particular transaction, a time interval, and a completion time for each instance of the particular 
transaction, and wherein the step of evaluating includes determining whether the number of 
occurrences of a transaction having the event identifier of the threshold criterion data and 
occurring within the time interval of the threshold criterion data require more than the 
completion time of the threshold criterion data to complete. 

40. (Canceled) 
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